CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting...7.5 High
- logpoint soarAn issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate...6.4 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can...7.5 High
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup...7.5 High
- realtek rtl8762ekf-evb firmwareAn issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows...4.3 Medium
- inshot.com x downloaderThe Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through...8.1 High
- asdcom hd video downloaderThe ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0...8.8 High
- nllcom acr phoneThe NLL com.nll.cb (aka ACR Phone) application through 0.330-playStore-NoAccessibility-arm8 for...6.2 Medium
- goodwy com right dialerThe Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any...7.5 High
- No product listedThe com.callassistant.android (aka AI Call Assistant & Screener) application 1.174 for Android...4.0 Medium
- luvion grand elite 3 connectAn issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can...7.5 High
- lush 2 2An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic...8.8 High
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.8.0 High
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created...5.4 Medium
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value,...4.3 Medium
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user...6.3 Medium
- No product listedAn issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot...6.2 Medium
- No product listedAn issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly...4.6 Medium
- No product listedAn issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial...5.3 Medium
- alecto ivm-100 firmwareAn issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP...9.8 Critical
- epson xp-255An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't...8.8 High
- epson xp-255An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1...8.4 High
- epson xp-255An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the...8.8 High
- brother mfc-j491dwAn issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface...9.1 Critical
- monocmsMonoCMS Posts Page opensaved.php cross site scripting5.3 Medium
- monocmsMonoCMS Account Information Page account.php cross site scripting5.3 Medium
- ibphoenix ibwebadminIBPhoenix ibWebAdmin Tabelas Section toggle_fold_panel.php cross site scripting5.3 Medium
- mozilla firefoxA malicious website could have included an iframe with an malformed URI resulting in a non...6.5 Medium
- twigphp twigUnguarded calls to __toString() when nesting an object into an array in Twig2.2 Low
- twigphp twigUnguarded calls to __isset() and to array-accesses when the sandbox is enabled in Twig2.2 Low
- rabbitmq rabbitmq-serverHTTP API's queue deletion endpoint does not verify that the user has a required permission6.5 Medium
ca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scorelibnss3TuxCare,libnss3-devTuxCare,libnss3-toolsTuxCare +2 moreUpdate of alt-phpNo scoreca-certificatesTuxCareUpdate of alt-phpNo scoreca-certificatesTuxCareUpdate of alt-phpNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo score- cisco aironet access point software, aironet access point software (ios xe controller) +1 moreCisco Ultra-Reliable Wireless Backhaul Software Command Injection Vulnerability10.0 Critical
- f5 nginx openid connect, nginx api connectivity manager, nginx ingress controller +1 more +3 moreNGINX OpenID Connect Vulnerability5.1 Medium
ca-certificatesTuxCareUpdate of ca-certificatesNo score- cisco unified contact center management portalCisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- Show moreLoading…